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ABSTRACT OF THE INVENTION 

A system and method for retrieving certificate of trust information for a certificate 
validation process. Fetching servers periodically retrieve certificate revocation lists 
(CRLs) from servers maintained by various certificate issuers. The revoked certificate 
data included in the retrieved CRLs are stored in a central database. An authentication 
server receives a request from a client for access to a secure service and initiates a 
validation process. The authentication server retrieves revoked certificate data from the 
central database and compares the retrieved revoked certificate data to certificate of trust 
information received from the client along with the request. The authentication server 
denies access to the secure information if the certificate of trust information matches 
revoked certificate data from the central database, allows access if the certificate of trust 
information does not match revoked certificate data from the central database. 
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